Skill UI

A comprehensive guide for authorized penetration testers on identifying and exploiting insecure deserialization vulnerabilities across multiple languages (Java, PHP, Python, .NET). Covers techniques for generating payloads using tools like ysoserial and phpggc, and testing various application components such as cookies, HTTP parameters, and message queues to achieve potential Remote Code Execution (RCE).

This tool automates the extraction of embedded configuration details from Agent Tesla Remote Access Trojan (RAT) samples. It is designed to recover crucial exfiltration credentials (SMTP, FTP, Telegram), keylogger settings, and Command and Control (C2) endpoints by analyzing and deobfuscating the .NET assembly structure. Essential for threat intelligence, incident response, and malware reverse engineering.

A comprehensive guide for reversing and analyzing .NET malware samples. Learn the full workflow, including identifying .NET assemblies, using de4dot to deobfuscate code protected by tools like ConfuserEx or SmartAssembly, and loading the cleaned code into dnSpy. This skill is essential for extracting hardcoded C2 configurations, encryption keys, and credentials, and debugging runtime behaviors of complex malware.

This guide provides comprehensive testing patterns for C# and .NET applications. It covers best practices using xUnit, FluentAssertions, and advanced techniques like mocking (NSubstitute/Moq), parameterized testing, and full integration testing using Testcontainers and WebApplicationFactory. Ideal for improving test quality, coverage, and developing robust, maintainable codebases.

This comprehensive guide covers idiomatic C# and modern .NET best practices for building robust, high-performance, and maintainable applications. Topics include immutability, dependency injection, explicit coding, proper async/await usage, the Options pattern, and the Result pattern. Essential reading for developers designing services with ASP.NET Core.

Checks Microsoft SDK code by verifying API signatures, fetching docs, and finding Azure samples before writing or reviewing code that touches .NET or Microsoft APIs.

Query authoritative Microsoft documentation to explain Azure, .NET, M365, Windows, and Power Platform concepts, tutorials, limits, configurations, or best practices whenever a user wants to understand how something works.

Guides agents through researching Microsoft technologies via Learn MCP docs, then scaffolds hybrid skills that store essential knowledge locally while enabling dynamic lookups for depth.

This guide teaches how to build well-structured and robust ASP.NET Minimal APIs. It covers best practices for API organization, defining clear DTOs with proper validation, handling strongly-typed parameters, and leveraging modern C# features. Crucially, it demonstrates how to generate comprehensive, standards-compliant OpenAPI/Swagger documentation using built-in .NET features, ensuring APIs are fully documented for seamless consumption.

This comprehensive template and guide facilitate the containerization of ASP.NET Core applications. It provides a structured prompt and checklist to ensure that the resulting Dockerfile adheres to industry best practices for performance, security, and maintainability when running on Linux containers. It covers all necessary aspects, including dependency management, port exposure, build stages, and custom configuration.

Generates integration test cases for .NET data access artifacts targeting Oracle as the authoritative baseline. Tests are portable and later migrated to PostgreSQL in Phase 6. Use only in Phase 3 before migration work begins, not during Phase 6 or against already-migrated projects.

This skill guides the generation of a complete, production-ready Model Context Protocol (MCP) server using C# and .NET. It covers advanced architectural patterns, including Host builder setup, proper dependency injection, structured logging, and implementing robust functional tools. Ideal for developers building sophisticated AI agents or backend services that require standardized communication and tool invocation capabilities.